Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa
File:                     3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa (raw, json)
Hash identifier:          wzLI454vwYbKO3rB33XWxGSUGW81zG5EIXv6vXlXNac=
Subject key identifier:   83:43:0F:55:D1:AD:B0:4E:4C:A6:F2:B3:0A:41:3A:C0:E2:DA:D9:BB
Certificate issuer:       /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial:       5113C2AE883B45D5A3F9DB27BE5E6759D8ED3CF1
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa
Signing time:             Mon 31 Jul 2023 00:05:32 +0000
ROA not before:           Mon 31 Jul 2023 00:00:32 +0000
ROA not after:            Mon 29 Jul 2024 00:05:32 +0000
asID:                     138887
IP address blocks:        103.141.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
                          rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:13:c2:ae:88:3b:45:d5:a3:f9:db:27:be:5e:67:59:d8:ed:3c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
        Validity
            Not Before: Jul 31 00:00:32 2023 GMT
            Not After : Jul 29 00:05:32 2024 GMT
        Subject: CN=83430F55D1ADB04E4CA6F2B30A413AC0E2DAD9BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:16:39:79:82:ac:03:c0:9f:23:1b:de:7d:f6:
                    60:7c:c6:9b:5a:83:b9:c1:eb:cd:b7:96:55:23:63:
                    78:32:7a:bc:d2:30:ae:1d:5b:95:c6:d6:ad:4d:a6:
                    3b:44:88:98:b1:4e:7d:66:e3:72:fb:7c:3b:88:79:
                    38:e0:44:3f:9e:5f:c4:da:88:59:40:a0:66:51:79:
                    6a:ab:c5:56:33:b2:6b:09:1b:52:72:4e:06:6f:12:
                    b4:d6:4a:a3:a1:78:2b:f9:25:74:35:57:92:a2:17:
                    a7:8c:0c:90:28:07:8c:b9:08:93:02:85:ee:76:63:
                    7d:62:5d:80:20:8a:f4:a4:66:81:3d:15:07:1d:88:
                    1d:9d:3e:2f:30:f2:95:c2:2b:47:a5:03:4d:cb:4b:
                    73:af:ff:ae:e1:6a:ea:93:a7:72:46:f3:64:f8:21:
                    de:08:c6:72:8f:2a:8d:a8:0a:6b:51:77:30:6e:3c:
                    93:ad:e5:f0:1e:36:fe:59:75:c0:67:48:fc:bd:8b:
                    36:36:83:54:d3:b3:8e:7b:af:3b:09:ee:05:23:a4:
                    d5:18:3c:43:a1:70:1b:9d:5f:d7:a1:7b:2b:3f:66:
                    82:a4:74:32:a6:95:75:63:bc:9a:d5:38:c9:ab:a6:
                    b9:e5:8f:3d:fa:8e:5f:9c:1d:c3:40:79:9c:08:a7:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:43:0F:55:D1:AD:B0:4E:4C:A6:F2:B3:0A:41:3A:C0:E2:DA:D9:BB
            X509v3 Authority Key Identifier:
                keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:d6:a3:43:ae:5f:32:5b:40:93:60:b2:fb:c2:e2:7b:19:48:
         14:e2:2f:3f:79:77:3a:aa:f8:26:0a:92:9f:40:28:49:9d:d7:
         75:ca:84:f5:a2:d6:d9:03:1a:d4:a9:63:44:81:98:36:94:0b:
         8c:19:3f:d7:5d:eb:26:b9:59:aa:3d:ac:3d:3b:2c:25:34:41:
         82:5e:a5:87:77:d6:3d:38:0d:86:e3:11:b7:82:04:54:3f:99:
         27:8a:35:eb:f8:16:86:ec:55:75:2d:00:07:b2:60:7c:de:ce:
         ab:12:e5:db:bc:6f:a7:fa:e8:c2:7d:4b:58:93:d5:d7:a5:cf:
         0b:65:62:c2:17:b7:9d:a6:a0:4b:76:79:f4:ae:67:40:2a:ef:
         ec:56:60:e4:cc:b9:fe:04:5f:0e:94:4b:47:32:90:97:3a:0c:
         38:3e:c3:e4:ae:b3:59:d1:eb:32:9f:29:0b:31:e8:78:e6:e4:
         3a:e0:5c:13:33:ff:f2:52:a7:8b:f1:40:6b:0f:de:bf:f2:5e:
         66:f9:04:6d:f5:1d:83:18:f6:e1:7a:60:d3:da:44:a7:9d:07:
         9c:dc:c6:be:ee:f1:1c:f7:aa:49:f9:25:42:4b:47:f0:6d:8a:
         d5:a2:fb:21:6a:ce:ab:30:34:5f:ae:e6:f8:90:7c:d9:4a:c7:
         d7:96:ef:34
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUURPCrog7RdWj+dsnvl5nWdjtPPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBGOUVENTkyOTBBRDc3REUyODU2RUNGRDgzNDBFMjhG
Rjg1OEUzRDAeFw0yMzA3MzEwMDAwMzJaFw0yNDA3MjkwMDA1MzJaMDMxMTAvBgNV
BAMTKDgzNDMwRjU1RDFBREIwNEU0Q0E2RjJCMzBBNDEzQUMwRTJEQUQ5QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnFjl5gqwDwJ8jG9599mB8xpta
g7nB6823llUjY3gyerzSMK4dW5XG1q1NpjtEiJixTn1m43L7fDuIeTjgRD+eX8Ta
iFlAoGZReWqrxVYzsmsJG1JyTgZvErTWSqOheCv5JXQ1V5KiF6eMDJAoB4y5CJMC
he52Y31iXYAgivSkZoE9FQcdiB2dPi8w8pXCK0elA03LS3Ov/67hauqTp3JG82T4
Id4IxnKPKo2oCmtRdzBuPJOt5fAeNv5ZdcBnSPy9izY2g1TTs457rzsJ7gUjpNUY
PEOhcBudX9eheys/ZoKkdDKmlXVjvJrVOMmrprnljz36jl+cHcNAeZwIpzxRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUg0MPVdGtsE5MpvKzCkE6wOLa2bswHwYDVR0j
BBgwFoAUgPntWSkK133ihW7P2DQOKP+Fjj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MDdjODhkYS0yYjU2LTQ4N2UtOWVmZS01NzExNzBiMTAyODYvMC84MEY5RUQ1OTI5
MEFENzdERTI4NTZFQ0ZEODM0MEUyOEZGODU4RTNELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODBGOUVENTkyOTBBRDc3REUyODU2RUNGRDgzNDBFMjhGRjg1
OEUzRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MwN2M4OGRhLTJiNTYtNDg3ZS05
ZWZlLTU3MTE3MGIxMDI4Ni8wLzMxMzAzMzJlMzEzNDMxMmUzMjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ40UMA0GCSqG
SIb3DQEBCwUAA4IBAQAL1qNDrl8yW0CTYLL7wuJ7GUgU4i8/eXc6qvgmCpKfQChJ
ndd1yoT1otbZAxrUqWNEgZg2lAuMGT/XXesmuVmqPaw9OywlNEGCXqWHd9Y9OA2G
4xG3ggRUP5knijXr+BaG7FV1LQAHsmB83s6rEuXbvG+n+ujCfUtYk9XXpc8LZWLC
F7edpqBLdnn0rmdAKu/sVmDkzLn+BF8OlEtHMpCXOgw4PsPkrrNZ0esynykLMeh4
5uQ64FwTM//yUqeL8UBrD96/8l5m+QRt9R2DGPbhemDT2kSnnQec3Ma+7vEc96pJ
+SVCS0fwbYrVovshas6rMDRfrub4kHzZSsfXlu80
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:06:23 2024 by rpki-client on console-ams.rpki-client.org